sessionStorage) and is sent only to MISA's servers via
this site's proxy. Nothing is stored on the server, nothing is logged, and closing the tab clears
it. Use the Clear session button when done. Prefer the Paste token mode if you
already have a token — it avoids typing your password here at all.1 · Settings
Host and company scope. Dates default to yesterday (the daily-download window).
2 · Sign in
Auth in the app: MISA ID → access token → meInvoice JWT. This step tries the candidate token endpoints in order and keeps the first token it finds.
Status: Not signed in
3 · List invoices
Tries the paging endpoints for the chosen family (POST with JSON body first, then GET) and renders the result. The raw response is shown in the log below.
4 · Download PDF / XML
For each listed invoice, tries the file-download candidates in order:
/Handler/V3DownloadHandler.ashx, then /invoices/print-pdf, then
/invoices/invoicefiles-trans. The handler's exact query parameters were not in the
binary — edit the templates below if the first try fails; {refId},
{code}, {id} are replaced per invoice.
5 · Raw API tester
Try any endpoint from the spec directly. Useful for confirming a verb or a parameter the list/download steps guessed wrong.
Try: /v3system/appconfig (no login needed, checks the proxy),
/v3sainvoice/paging, /v3invoice/code/preview.
Request log
Every attempt, in order, with status and a truncated body. Tokens are masked here.
Endpoints found in the app (reference)
Auth: /v3system/misaid/accessToken, /v3system/misaid/refreshAccessToken,
/api2/auth/jwttoken, /api2/user/refreshtoken, /User/AuthenticationOTPV2,
/account/login. List: /v3sainvoice/paging, /v3sainvoice/code/paging,
/v3approve/invoice/paging, /cashregisterinvoice/paging/v2.
Detail: /v3invoice/code/preview, /v3invoice/published/preview/.
Files: /Handler/V3DownloadHandler.ashx, /invoices/print-pdf,
/invoices/invoicefiles-trans. Full catalog (126 paths) in the architecture document.